$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: rn3VSXhHkfV3t7m4QJWG3+Z2IbdSGal6Yiv1+vmcVRM= Subject key identifier: B7:34:0E:E4:A2:39:78:73:27:86:36:D4:0F:19:F7:AF:B9:65:81:35 Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 01DD Signing time: Sat 23 Aug 2025 02:52:22 +0000 Manifest this update: Sat 23 Aug 2025 02:52:22 +0000 Manifest next update: Sat 30 Aug 2025 02:52:22 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: aPmU3Kx5UJjWMPjrAxvpKwAXAv5zyVWbd445iID3rmI=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: kKiJiJDzeIyQzgTjMAe9Lk1kOFbiYohKDFsKrxG/BWs=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: sZLM9dSUcucufQMax9H1Edh8mrh+cYvOCFePwEcH86c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: Aug 23 02:52:22 2025 GMT Not After : Aug 30 02:52:22 2025 GMT Subject: CN=68a92ce6-7737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:74:b8:fa:93:72:c4:bf:2e:a7:3e:52:53:3e: 07:bd:aa:98:b9:9e:1f:24:c3:9c:a4:ef:77:58:c0: d0:e3:3c:25:91:1c:ea:53:fe:f8:77:e5:5e:f2:b4: 0d:7b:af:1a:81:bf:ed:8a:de:95:89:d3:20:65:8a: aa:02:11:ba:13:c0:67:11:ce:c5:e2:59:cb:44:b8: fa:91:ce:25:ef:c2:e5:b4:0e:cc:c2:0c:50:e5:50: ec:fb:b3:24:d3:23:45:bc:5e:39:63:39:f9:f9:d3: fc:c9:8e:ac:44:f6:12:68:a5:72:98:26:a8:ab:0b: 3b:0e:3b:6c:71:46:aa:b9:7d:6e:5d:da:9d:32:86: 56:29:49:c0:4c:7c:ff:6b:b8:b6:00:f9:b0:90:da: 7a:c6:ff:e7:06:e4:9e:e0:4c:75:31:ef:2e:cd:0c: 95:90:80:c9:da:d1:a8:b2:37:3c:eb:ad:69:45:67: d5:a6:78:f0:19:c6:c7:fa:97:55:3d:bc:13:de:d7: 49:d9:d9:2c:db:e5:b6:db:9c:9d:ca:42:a6:1a:29: 23:e4:86:62:a4:aa:44:a1:4b:e8:08:5a:33:ed:7f: f1:6b:6f:e8:0f:4c:27:67:4c:77:4f:8a:99:60:b9: 8e:1e:0f:17:9e:2e:cb:00:1a:9b:91:b0:ac:e0:05: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:34:0E:E4:A2:39:78:73:27:86:36:D4:0F:19:F7:AF:B9:65:81:35 X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:21:d2:64:70:44:cc:9e:13:3f:6e:11:f9:8c:d9:93:2d:62: c8:9e:92:63:5a:fd:49:50:01:ba:7c:2f:79:fa:ce:f7:b3:72: c7:22:f6:79:26:91:06:c5:05:69:86:ac:2f:91:68:e9:e2:26: f4:34:3d:5c:99:c3:56:04:9c:53:2f:b4:17:9e:08:17:23:ca: b6:0e:4b:55:54:f4:63:2a:a2:ac:b9:90:b2:e0:a1:11:ce:3a: 35:b8:d2:27:14:8f:5e:65:8a:0f:aa:5f:f0:f8:c6:05:59:75: f6:5e:7c:34:29:ec:ad:08:e4:af:d4:c8:43:b7:69:e1:8c:f4: bc:f4:d7:6e:7b:77:cb:f8:ac:60:90:f4:41:fd:9a:11:6a:f8: e1:08:af:8a:ec:b6:7b:80:30:0f:60:b9:9b:96:19:1f:e2:b7: 1b:f2:05:5b:c7:60:be:4a:a4:b3:c1:f4:1d:28:4a:78:44:90: 61:43:42:16:ec:71:06:02:48:df:4f:dd:23:9d:b9:42:ae:c9: 73:15:b9:3b:7e:e6:94:2f:ea:de:fa:13:0d:3f:f1:1b:e8:07: f0:f9:f2:2a:10:f9:7c:20:79:5b:2b:0c:96:dd:d9:30:44:d4: 96:57:a6:fb:3c:bb:5c:1c:43:cb:34:f9:9c:57:a3:d6:d5:9d: 34:1b:fd:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjUwODIzMDI1MjIyWhcNMjUwODMwMDI1MjIyWjAYMRYwFAYD VQQDEw02OGE5MmNlNi03NzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9XS4+pNyxL8upz5SUz4HvaqYuZ4fJMOcpO93WMDQ4zwlkRzqU/74d+Ve8rQN e68agb/tit6VidMgZYqqAhG6E8BnEc7F4lnLRLj6kc4l78LltA7MwgxQ5VDs+7Mk 0yNFvF45Yzn5+dP8yY6sRPYSaKVymCaoqws7DjtscUaquX1uXdqdMoZWKUnATHz/ a7i2APmwkNp6xv/nBuSe4Ex1Me8uzQyVkIDJ2tGosjc8661pRWfVpnjwGcbH+pdV PbwT3tdJ2dks2+W225ydykKmGikj5IZipKpEoUvoCFoz7X/xa2/oD0wnZ0x3T4qZ YLmOHg8Xni7LABqbkbCs4AXr0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc0DuSi OXhzJ4Y21A8Z96+5ZYE1MB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvIdJkcETMnhM/bhH5jNmTLWLInpJjWv1JUAG6fC95+s73s3LHIvZ5 JpEGxQVphqwvkWjp4ib0ND1cmcNWBJxTL7QXnggXI8q2DktVVPRjKqKsuZCy4KER zjo1uNInFI9eZYoPql/w+MYFWXX2Xnw0KeytCOSv1MhDt2nhjPS89Ndue3fL+Kxg kPRB/ZoRavjhCK+K7LZ7gDAPYLmblhkf4rcb8gVbx2C+SqSzwfQdKEp4RJBhQ0IW 7HEGAkjfT90jnblCrslzFbk7fuaUL+re+hMNP/Eb6Afw+fIqEPl8IHlbKwyW3dkw RNSWV6b7PLtcHEPLNPmcV6PW1Z00G/2P -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:51 2025 by rpki-client